Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a4de857-40c4-317f-a808-1db8ae12c343.roa
File:                     4a4de857-40c4-317f-a808-1db8ae12c343.roa (raw, json)
Hash identifier:          /4KfITAOebMssfUqt/OMalSw5DaYSU61EnrdqSiqZx8=
Subject key identifier:   71:0F:61:D4:CE:16:3E:E3:98:71:C1:66:E9:26:1C:92:AD:A3:A1:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AAF4AD2E0DEBDE4B39580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a4de857-40c4-317f-a808-1db8ae12c343.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        73.37.22.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:af:4a:d2:e0:de:bd:e4:b3:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=2fa3c0fd-9d3f-4cb0-b344-3c7799aa2922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:c7:a9:a4:ba:8f:15:4a:b5:b6:3c:33:76:
                    9b:b5:55:ae:9d:f3:89:cd:e7:87:7f:61:ea:02:7c:
                    8b:ce:1d:d7:b0:d4:1f:f1:bd:af:45:22:59:70:7e:
                    53:84:b9:2a:f4:6e:dc:a2:5a:ea:75:81:be:2b:75:
                    ad:8b:ea:b1:99:c4:05:65:1f:ea:fc:d3:3d:ba:7c:
                    92:50:56:a1:8a:ee:32:19:c1:ed:b7:0d:ec:08:20:
                    be:75:cc:a4:8d:56:77:f0:ef:c9:4d:8b:da:e1:32:
                    39:5b:1f:0a:35:3b:56:af:60:ce:0f:a4:ef:e9:be:
                    f0:24:4e:71:65:b7:24:e1:bd:7e:34:3c:16:7a:79:
                    fc:f4:2f:1c:eb:f4:29:a1:2e:cc:66:73:85:8e:ff:
                    b3:7b:a0:25:a3:30:7e:ab:b9:7f:e9:00:7f:2e:88:
                    f0:88:8c:3e:90:a3:38:fb:dd:0f:1a:c9:57:ec:c0:
                    b7:ea:1d:5f:35:55:bc:33:e7:d6:48:13:5c:be:35:
                    1e:1c:c8:f7:ec:8c:57:1d:04:12:a6:c1:fd:c9:7d:
                    4c:e8:6c:02:6f:19:dc:f0:ea:49:19:93:df:79:b3:
                    74:d9:3b:d7:e6:fa:78:d1:72:d4:ba:b4:c3:49:58:
                    b9:6b:d7:fa:13:d3:c2:43:f3:90:0f:91:34:92:4b:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:61:D4:CE:16:3E:E3:98:71:C1:66:E9:26:1C:92:AD:A3:A1:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a4de857-40c4-317f-a808-1db8ae12c343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.37.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:15:98:f9:20:a5:fe:06:63:68:1f:a9:f2:cd:05:0e:96:
         73:5d:0c:9b:3b:7e:c3:68:eb:23:6e:0e:66:66:a0:6e:03:5c:
         0f:87:44:4e:42:13:f5:8b:a5:98:4b:5f:c1:19:ea:5b:9e:d6:
         67:16:ac:04:89:2a:56:6f:3b:99:ac:5e:e1:57:0f:6b:b3:55:
         7d:00:5d:f8:c6:6f:d6:9e:f6:a1:99:8d:31:83:5c:04:e2:e3:
         aa:ad:6d:63:88:cc:b5:84:17:db:a4:9b:99:ad:a8:d8:84:c7:
         9a:9d:5e:59:9a:21:63:26:47:93:ea:56:61:fb:a5:c7:cf:ac:
         9d:0d:53:11:d1:70:c0:3d:d2:08:72:9f:ae:26:35:38:09:b7:
         ca:d8:9d:f6:f5:49:48:ef:7f:3d:d9:6a:30:e3:76:fe:6b:e7:
         17:a3:78:3e:46:4d:30:38:8f:8a:58:bd:8e:7b:0f:03:0b:bd:
         9d:7a:d8:33:b6:f4:f0:c2:6f:93:19:7b:60:38:5a:53:6e:b8:
         58:63:cd:e1:9e:56:8a:3b:f6:7f:0d:34:8d:47:bd:28:29:f1:
         70:fc:74:f8:0c:67:e1:ed:19:9f:01:36:ba:aa:8d:21:43:b0:
         a5:ea:5c:32:94:c9:05:36:09:e4:c4:18:3d:5b:8e:53:be:6e:
         05:c4:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:58:21 2025 by rpki-client